Skip to content

Conversation

@chrishiestand
Copy link
Contributor

@chrishiestand chrishiestand commented Aug 22, 2018

It is inaccurate to say that build args will not persist in the final image. They are visible with docker history and docker inspect. The old description may cause someone to expose secrets.

As soon as possible, we should upgrade to docker 18.09 to support --secret - a way to securely pass credentials into the build context.

docker/cli#1288

It is inaccurate to say that build args will not persist in the final image. They are visible with `docker history` and `docker inspect`.

As soon as possible, we should upgrade to docker 18.09 to support `--secret` - a way to securely pass credentials into the build context.

docker/cli#1288
@vito
Copy link
Member

vito commented Aug 22, 2018

Good point, thanks!

@vito vito merged commit 3db50cb into concourse:master Aug 22, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants